Microsoft Windows 11

Name: Microsoft Windows 11
Brand: Microsoft

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

5critical65high25medium0low

updated 2026-10-27

vulnerabilities (1,063)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-21412US	—OT critical	99.4% (100th)	KEV	no fix	2024-02-13	≤ version 21H2
CVE-2023-36025US	high8.8OT critical	88.1% (100th)	KEV	no fix	2023-11-14	≤ version 21H2
CVE-2024-38112US	—OT critical	84.2% (100th)	KEV	no fix	2024-07-09	≤ version 21H2
CVE-2026-33824US	—OT critical	77.1% (100th)	KEV	no fix	2026-04-14	2 versions
CVE-2026-32202US	—OT critical	70.9% (99th)	KEV	no fix	2026-04-14	2 versions
CVE-2024-30088US	—OT critical	68.2% (99th)	KEV	no fix	2024-06-11	≤ version 21H2
CVE-2026-21510US	—OT critical	61.2% (99th)	KEV	no fix	2026-02-10	≤ version 26H1
CVE-2024-21338US	—OT critical	59.8% (99th)	KEV	no fix	2024-02-13	≤ version 21H2
CVE-2023-29336US	—OT critical	41.2% (99th)	KEV	no fix	2023-05-09	≤ version 21H2
CVE-2023-21674US	—OT critical	34.2% (98th)	KEV	no fix	2023-01-10	≤ version 21H2
CVE-2024-38193US	—OT critical	28.7% (98th)	KEV	no fix	2024-08-13	≤ version 21H2
CVE-2024-35250US	—OT critical	25.2% (98th)	KEV	no fix	2024-06-11	≤ version 21H2
CVE-2023-29360US	—OT critical	21.6% (98th)	KEV	no fix	2023-06-14	≤ version 21H2
CVE-2023-36424US	high7.8OT critical	12.1% (96th)	KEV	no fix	2023-11-14	≤ version 21H2
CVE-2024-38080US	—OT critical	7.12% (94th)	KEV	no fix	2024-07-09	≤ version 21H2
CVE-2024-30051US	—OT critical	5.69% (93rd)	KEV	no fix	2024-05-14	≤ version 21H2
CVE-2026-21533US	—OT critical	4.15% (91st)	KEV	no fix	2026-02-10	≤ version 26H1
CVE-2024-26169US	—OT critical	3.98% (90th)	KEV	no fix	2024-03-12	≤ version 21H2
CVE-2024-43572US	—OT critical	66.7% (99th)	KEV	no fix	2024-10-08	≤ version 21H2
CVE-2024-43461US	—OT critical	54.5% (99th)	KEV	no fix	2024-09-10	≤ version 21H2
CVE-2024-43573US	high8.1OT critical	46.1% (99th)	KEV	no fix	2024-10-08	≤ version 21H2
CVE-2024-38178US	—OT critical	41.4% (99th)	KEV	no fix	2024-08-13	≤ version 21H2
CVE-2024-21351US	—OT critical	27.8% (98th)	KEV	no fix	2024-02-13	≤ version 21H2
CVE-2023-36036US	high7.8OT critical	16.7% (97th)	KEV	no fix	2023-11-14	≤ version 21H2
CVE-2026-21513US	—OT critical	15.9% (97th)	KEV	no fix	2026-02-10	≤ version 26H1
CVE-2024-38213US	—OT critical	13.6% (96th)	KEV	no fix	2024-08-13	≤ version 21H2
CVE-2023-36033US	high7.8OT critical	10.9% (96th)	KEV	no fix	2023-11-14	≤ version 21H2
CVE-2024-38217US	—OT critical	10.0% (96th)	KEV	no fix	2024-09-10	≤ version 21H2
CVE-2024-38106US	—OT critical	6.34% (94th)	KEV	no fix	2024-08-13	≤ version 21H2
CVE-2024-38014US	—OT critical	6.26% (94th)	KEV	no fix	2024-09-10	≤ version 21H2
CVE-2026-21525US	—OT critical	4.87% (92nd)	KEV	no fix	2026-02-10	≤ version 26H1
CVE-2024-30040US	—OT critical	3.94% (90th)	KEV	no fix	2024-05-14	≤ version 21H2
CVE-2026-21519US	—OT critical	2.48% (84th)	KEV	no fix	2026-02-10	≤ version 26H1
CVE-2024-38107US	—OT critical	1.64% (76th)	KEV	no fix	2024-08-13	≤ version 21H2
CVE-2024-38077US	—	84.2% (100th)	Exploit	no fix	2024-07-09	≤ version 21H2
CVE-2026-41089US	—	79.6% (100th)	Exploit	no fix	2026-05-12	≤ version 26H1
CVE-2024-38063US	—	70.6% (99th)	Exploit	no fix	2024-08-13	≤ version 21H2
CVE-2023-21768US	—	65.4% (99th)	Exploit	no fix	2023-01-10	≤ version 21H2
CVE-2026-49160US	—	56.6% (99th)	Exploit	no fix	2026-06-09	≤ version 26H1
CVE-2024-38144US	—	32.3% (98th)	Exploit	no fix	2024-08-13	≤ version 21H2
CVE-2024-21320US	medium6.5	22.6% (98th)	Exploit	no fix	2024-01-09	≤ version 21H2
CVE-2024-21345US	—	20.2% (97th)	Exploit	no fix	2024-02-13	≤ version 21H2
CVE-2024-20674US	—	17.2% (97th)	Exploit	no fix	2024-01-09	≤ version 21H2
CVE-2024-30085US	—	14.3% (97th)	Exploit	no fix	2024-06-11	≤ version 21H2
CVE-2024-26160US	—	11.4% (96th)	Exploit	no fix	2024-03-12	≤ version 21H2
CVE-2024-20698US	—	8.65% (95th)	Exploit	no fix	2024-01-09	≤ version 21H2
CVE-2026-42980US	—	6.95% (94th)	Exploit	no fix	2026-06-09	≤ version 26H1
CVE-2024-26170US	—	6.65% (94th)	Exploit	no fix	2024-03-12	≤ version 21H2
CVE-2024-30084US	—	5.91% (93rd)	Exploit	no fix	2024-06-11	≤ version 21H2
CVE-2024-21306US	—OT elevated	5.78% (93rd)	Exploit	no fix	2024-01-09	≤ version 21H2

showing 50 of 1,063

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free203 CVEs
CWE-20Improper Input Validation156 CVEs
CWE-122Heap-based Buffer Overflow155 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')98 CVEs
CWE-125Out-of-bounds Read93 CVEs
CWE-264CWE-26474 CVEs
CWE-190Integer Overflow or Wraparound59 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor55 CVEs

sources (4)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)1,059 CVEs
NLNCSC-NL (CSAF)134 CVEs
EUEU Vulnerability Database (ENISA)2 CVEs
USCISA CSAF IT advisories1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan